CVE-2026-111357 — Vulnerability intelligence

Ivanti — Connect Secure

Published: 2026-10-15T20:56:58.045Z

CVSS

7

CISA KEV

Known exploitation

Original source text (not a translation)

Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.

Sources

• Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-111357